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REMARKS 

liiehvimmei has teiected Claims i-> ^-S 12 I4-|0 21-24 21 M\-l\ 44, 4o- 

S|, 60, 62-67, 69-72, ?<,, 7f?-j^, Xs-KK, «2, <).]-<)(, and utidei ^ I' SC 10 Ma) as benv> 

unpatentable o\et Co//n (i S Patent No > C^'J) 0 ^ in \ few ot \i nold et al (1'S Patent No 
- 44: e>QQ) a iul iujthti! sn vksu of Piettek < Tecuot! inside the PF \ Tout of the Win ^2 Portable 
i \ecntable 1 Applicant lespectfulK d^agice^ with sudi rejection 

fo establish a p- i->ia U^tc ease ot ob\ jousnebs three bane cntena rut lot be met Hk-t 
there must be ->ome suggestion or tnotn ation either >n the lereiencea thenibt-Kes oi tn the 
kmns ledje fuu'iaih mailable to one of oidmat\ skill in the ait, to modif\ the lefeience ot to 
combine leieience teachings. Second theie mast bo a reasonable expectation ot -.uecess f mallx 
the pi f oi an icferenee tot references when combined) must teath oi surest all the claim 
limitation-. The teaching oi Mijijiestion to make the claimed combination and the reasonable 
expectation ol success must both be found m the pnoi an and not based on applicant s dt^ioHue 
in to V aeck, ^47 f 2d 4KK, 20 1 SPQ2d 14^8 t -ed Cn i«Wi> 

V\ itb tespect to the lust element ot the pi una u,< w ^ase of obsioujnejs 4iid, tn pattKiiUi, 
die oln fousitts-, of combining the afoietneuttoned jefetefkos applu ani\-> a liniments spinning 
paiamaph * of Patte 21 to puiagtaph 2 of Pat?e 23 ate heteln uncnrpninted b\ refejenee 

In the Office Action mailed o<-> 1 " 200" the 1 xammer has an>ued that ~ Co//a disclose 
that if the fik. lequues decomptession then it is decomp tossed " and that such ' does not tequne 
decomptession m Co/za in addition the Fvimmet has ai juted that ' \ttiokl teaches an 
aik'inatue to deception when ^eatchm» tor \ iruses m an (.fiuspred file and that "fals such, the 
oidinan peison skilled m the an would ba\e been motnated to implement the teachings of 
-\inold in place ot the decomptession and seaicbm^ of Co/za butthei, the k\ammei has 
ai»ued that * in?;a does not teach a\\a\ ftom the teachings of \tnoU, but juthej disclosed tn 
altematise to the method oj Arnold " and that [njow heie tn < "o/sa Js theic an\ teaciun; 1 that 
would cause one of ordinary skill m the art to ignore or avoid the teachings of Arnold," 

VipikdM lespeitfnlh disj"jeo\ ( o//a disclo^thit aj eomptessed file ma\ ha\e 
ah^nh been decotripiessed ' but that [i I the tile doe-> inquire decompre >sion then ins 



si^cgmfi?J:'.§.'>i..si" oluron 7, [ mes 20-24-cmphass$ added) In fact, Cu/za onK teaches that after 
SM!ilJ..dt , .W.giOiy..V.^iQ.O *he ble is scanned (sec ^lep^ 5<4 5<6 °0 and u -i in Fumic 'ID of Co/za) 
1 iius ( ozza oxpies^K' discloses that a uompre»sed file i equnes deeowpt ess] on pner 10 betny 

scanned. 

Arnold, on the other hand, relates to "detect [ing] and locatpng] patterns that are present 
within data that has been encrypted" {see Abstract-emphasis added). As even noted by the 
Examiner, "Arnold teaches an alternative to decryption when searching for viruses in an 
encrypted file." Clearly, there would have been no motivation or suggestion to combine Arnold, 
which only relates to searching for patterns within encrypted data , with the teachings of Cozza. 
which ojjjv scans compressed data a tier such data is decumpiesscJ Thus the Pa ami net's 
proposed combination js inappropriate. Similar! y, searching for patterns within encrypted data , 
as in Arnold, does in fact (each away from only scanning compressed data after such data is 
decompressed , as in Cozza. 

'Thus, applicant respectfully asserts that the first element of the prima facie case of 
obviousness has not been met, as noted above. More importantly, applicant also respectfully 
asserts that the third element of the prima facie case of obviousness has not been met by the prior 
art it'ference excerpts relied on by the Examiner, f or example, u id) respect to the independent 
claims, the Examiner has relied on Col. 2. lines 54-65 and Col. 6, lines 6-45 from the Cozza 
reference to make a prior art showing of applicant's claimed ''reading resource data within said 
packed computer file, said resource data specifying program resource items used by said known 
computer program and readable by a computer operating system without dependence upon which 
unpacking algorithm is used by said packed computer file" {see this or similar, but not 
necessarily identical language in the independent claims). Applicant's arguments spanning 
paragraph 3 of Page 23 to paragraph 3 of Page 24 are hereby incorporated by reference. 

!n the Office Action mailed 09/ ! 7/2007, the Examiner has argued that '"the resource fork 
size falls within the scope of resource data." and that "Cozza disclosed that the resource fork may 
include application code, icons, preterences. strings, templates, and other such items" which "all 
tall under resource data as well." The Examiner has further argued that "by reading the resource 
fork size, which is part of the resource data, Cozza has met the limitation of [applicant's] claim." 
Still yet, the Examiner has argued that "Cozza specifically says that this may invoke 
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decompression, <«' executing some other special s\stem or other code in order to obtain this 
information," such that "Co/ /a disclosed that decompression \\as not teqnned " 

Applicant respectfully disagrees. Only reading a resource fork size, as in Cozza, does not 

meet applicant"-, claimed '"leadmg resource data vuthm said packed computet trie said icsomce 
data [that is ieadl specif un£ program resource items used In said l.nown computer program * 
(.emphasis added > in the conteu claimed b\ appheant \pplicanr emphasises that meieh t eadmtj; 
a st/e of a le^otuec iork where the resource fork nu> mckide application code. ieon->. 
prefeiences smugs templates and other Midi tlem. as noted h\ {he b ^tmmei. does not include 
reading the resource foik itself as the I \ammer \-cm 5 to auggest, and especial h does not meet 
applicant's speciftealb claimed ' -.aid resource data [thai is read] specth uig ptogtain resource 
items used bs .-.aid known computet piogi anf v en!phasis added) as claimed 

Vddiuoualh mereK alleging that ( o/va disci* nei u,-.mg decompression, or executing 
H'nit, othei special s\. 3 teni ot other code m oidei to obtain this m Tot motion, noted b> the 
i \ammer fads to even suggest 'leading icsou ce data w tthm sard packed compute! file said 
icsouiie data readable b\ a computer operating s\ ^rem without dependence upon which 
un packing algorithm is used bv said packed compute? file (emphasis added), in the context 
claimed by applicant. 

Huthei, the fcvannnei has i el ted on hgure ^ iii t o^-za to make a ptior an showing of 
applicant's Jamied technique 1 wherein said gctxrakd fingeipnnt data includes a tl tg indicating 
which data i-> included within <ud generated ft igeipimt data" (see this or -.mulat but not 
neeessauh identical language m the independent claims i Applicant s jiguments spanning 
paiagtaph 2 of Page 2<-> to paragraph 1 of Page 2" aie heieb} incorporated b\ refeicnee 

In the Office \ction mailed 09 {" 2007 the hxammet has aiuued that "the claim 
language does not ieqmre that the flag indicates all of the data that was included in the generated 
fingerprint data,' and that "[ejach set of flags of ( o/^a indicates which \ niises aie contained 
Aitlun a specific file 5 he f- \aminei has fuitbu argued that "the ftk data is iro-ed to gcneiate the 
hash poitton of the fingerprint and that *jt]hc flags indicate which xiitiscs and thus u Inch data 
was indikkO in the file data winch is hashed, which fa IK withtii the scope of the claim 
language. 
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Vpphtam lespeeifiilh disagrees ( o//:i otilv discloses thai the fla» included m a >cau 
mtormatiou cache file that 'include.; data that has been accumulated dunng the scanning ot files' 
(Col \ lines I"-- 1 ) OicatK a flag included in such a scan infotmation Cache file as m < <wa 
does not meet applicant s churned technique \\ herein ^afd generated fingerprint data mc hides 
a fiau indicating \<.htd> data is included Hithm Mid geueiated fingerprint data ' (emphasis added) 
pamcularh \\hen \aicl geneiated tmgeipum data includes a numlx-i ot piogiam lesoutce items 
specified \wthm eaid icsouice data of paid packed compute! Hie " in the context Jauned 

Still \et, \\ith ifspeet to the independent c 'aims, the 1 vimmei has iclied Col o lines 2°- 
-\5 (font the ( o//a ictercnee to make a prior art -.hovung of applicant s claimed technique 
\%heiem said generated fingerprint data induces a location within said tesouiee data of ^nd 
packed computer file ot an entr\ specifying a program kmiukc item having a largest m?l ' {see 
this 01 similar, but not neces.-atih- identical language m the independent claims! Applicant's 
aiguments .-.panning naiagtaphs 2-4 ofPage 2" aie heiebs incorporated b\ refeiuice 

In the Oiike Action mailed 09 1 7 2W 7 the Kvnnmet has. amued that 1 fbjeeaihc the file 
contains the lesouice fotk and resource items, and the hath us taken of the file, the signatuie 
iuchides a number of lesontce items specified v\ 'ihm the fc-soitfce folk, including the location of 
the emues of the lesouiee itenn including the iaigest tesontec item In addition the Lsanunei 
has aigued that v js jmnlatlv because the bash a of the file, the hash includes all locations w itlnn 
the file." 

\ppht.ant respectfully disagiees Stmpl> because a life allegedly contains the tesoutee 
fork, as noted b% the \ xaminei. does not inheientK suggest that * said geneiated fingerprint datt 
includes a location v\ uhm said resource data ot said packed computer file of an entre specify ma 
a piogiam resource item having a laigest si<?e (emphasis added) as jpectficalls claimed bs 
applicant. 

Moieosei with lespeet to du mdepencent claims, the txammei has u-hed on figuie S 
from ( o/?a and Page 21, "Pi \ ik Base Relocations ' m Psctiek to make a pnoi ait shoeing uf 
applicant's claimed technique w beiem said geneiated fingetpunt dat i includes a checksum 
wdue calculated m dependence upon a numbei of piogiatn it. sou ice items jpycified beneath 
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each node withm hieiaichicalh auanged icsource data of said packed computet file" (set- this ot 
snmlai bin not neec^sanK idensiea! language m lite independent claims) \pphcant s afgumenu 
spanning paiagiaph I of Page 2$ to paiagraph 1 of Page 2° aiehefehv mux pouted hv teierenee 

In the (Mike Action mailed 0°- 27 2007 the Fxammet lias tehed upon 'Ihe 'hash* as 
taught b\ Arnold m the combination as rneetng the limitation ot the ehciAsuin and not the 
checksum of the cache disclosed b> ( o??a " 

\pphcant iespeai'tilb di.sag!ees <ind asserts that that even the combination with Arnold 
does not meet applicant $ specific claim language I oi example, Arnold's meie disclosnie of 
usmg a hashing function (Col 1<> [mc« IS- 53> c-\ addition to Pjetiek's ceneiai disclosure of a 
sesotHce dneetoi\ hseuicb\ does not speuficalK teach a technique 'whet em said geneiated 
f n lyct print data includes a checksum \alne calculated m dependence upon a mimbei of pioyiam 
iesi)uii.e items specified beneath each node wnhm hicuichsealh <inani:ui iisouicc data of said 
packed computet file ' (emphasis added) as claimed b> applicant 

Applicant lespectftiih as^eits that at least the first and third element- of the ;v/»?<? fa^u 
cu.se of obviousness base not been met since it would be mmHio'is to t.omhiiie the lefereiices. as 
iioied abo\e and the onoi ait iefetence e\eeip\, as jehecl upon b\ die bxammet fail to leach ot 
succest aJl of the claim limitations as noted above 1 bus, a notice of allow ance oi a piopei prsoi 
art showing oi all oi applicant s claim limitations, m tombmauon w »h the remaining claim 
elements, is respectfully requested. 



